[Git][debian-gis-team/libapache2-mod-tile][master] 2 commits: Stop deleting system users on purge

[Bas Couwenberg (@sebastic)]

Bas Couwenberg pushed to branch master at Debian GIS Project / libapache2-mod-tile


Commits:
9df20e38 by Luca Boccassi at 2026-06-18T22:43:45+01:00
Stop deleting system users on purge

This is widely considered bad practice, as the kernel recycles UIDs/GIDs.
So any potential leftover file/directory can then become owned by the next
user/group that gets added, with unpredictable consequences.

- - - - -
53a27842 by Luca Boccassi at 2026-06-18T22:46:17+01:00
Install and use sysusers.d/tmpfiles.d config files

sysusers.d/tmpfiles.d config files allow a package to use declarative
configuration instead of manually written maintainer scripts. This also
allows image-based systems to be created with /usr/ only, and also
allows for factory resetting a system and recreating /etc/ on boot.

https://www.freedesktop.org/software/systemd/man/latest/sysusers.d.html
https://www.freedesktop.org/software/systemd/man/latest/tmpfiles.d.html

- - - - -


6 changed files:

- debian/control
- − debian/renderd.dirs
- − debian/renderd.postinst
- − debian/renderd.postrm
- + debian/renderd.sysusers
- debian/tmpfiles.d/renderd.conf


Changes:

=====================================
debian/control
=====================================
@@ -10,6 +10,7 @@ Build-Depends: apache2,
                debhelper-compat (= 13),
                dh-apache2,
                dh-sequence-apache2,
+               dh-sequence-installsysusers,
                libcairo2-dev,
                libcurl4-gnutls-dev | libcurl-ssl-dev,
                libglib2.0-dev,
@@ -46,8 +47,7 @@ Description: Apache module to deliver tiles created by renderd
 Package: renderd
 Architecture: any
 Section: utils
-Depends: adduser,
-         libapache2-mod-tile,
+Depends: libapache2-mod-tile,
          sysvinit-utils (>= 3.05-4),
          ${shlibs:Depends},
          ${misc:Depends}


=====================================
debian/renderd.dirs deleted
=====================================
@@ -1 +0,0 @@
-var/cache/renderd/tiles


=====================================
debian/renderd.postinst deleted
=====================================
@@ -1,28 +0,0 @@
-#!/bin/sh
-
-set -e
-
-case "$1" in
-    configure)
-	if ! getent group _renderd > /dev/null; then
-	    addgroup --force-badname --quiet --system _renderd
-	fi
-
-	if ! getent passwd _renderd > /dev/null; then
-	    adduser --force-badname --gecos "renderd daemon" \
-		    --home /nonexistent --ingroup _renderd \
-		    --no-create-home --quiet --system _renderd
-	fi
-	;;
-    abort-upgrade|abort-remove|abort-deconfigure)
-	;;
-    *)
-	echo "postinst called with unknown argument \`$1'" >&2
-	exit 1
-	;;
-esac
-
-chown _renderd:_renderd /var/cache/renderd
-chown _renderd:_renderd /var/cache/renderd/tiles
-
-#DEBHELPER#


=====================================
debian/renderd.postrm deleted
=====================================
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-set -e
-
-#DEBHELPER#
-
-if [ "$1" = "purge" ] ; then
-    deluser --quiet --system _renderd > /dev/null || true
-    delgroup --quiet --system _renderd > /dev/null || true
-fi


=====================================
debian/renderd.sysusers
=====================================
@@ -0,0 +1 @@
+u! _renderd - "renderd daemon" /nonexistent


=====================================
debian/tmpfiles.d/renderd.conf
=====================================
@@ -1 +1,3 @@
 d	/run/renderd	0755	_renderd	_renderd	-	-
+d	/var/cache/renderd	0755	_renderd	_renderd
+d	/var/cache/renderd/tiles	0755	_renderd	_renderd



View it on GitLab: https://salsa.debian.org/debian-gis-team/libapache2-mod-tile/-/compare/0853e279815a2309ad6642f82aa4bffa4d6aff92...53a27842ca0cbcb2aae6fb18861de23ead75c908

-- 
View it on GitLab: https://salsa.debian.org/debian-gis-team/libapache2-mod-tile/-/compare/0853e279815a2309ad6642f82aa4bffa4d6aff92...53a27842ca0cbcb2aae6fb18861de23ead75c908
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20260619/46abce14/attachment-0001.htm>